Using SPIRE as a Trusted Authority for OpenZiti IdentitiesIntroduction Identity management is central to modern network security. This post shows how to use short‑lived X.509 client certificates from SPIRE — the reference runtime for SPIFFE (Secure ProductioMar 23 · 5 min readblog.openziti.io
Easy Steps to Install a Private VPN on Linux with zrokThe great thing about the zrok-share.service is that it comes with the zrok binary and is always on in the background, so it's a good fit for a reliable VPN connection. Let's install the service and configure it to auto-start after a reboot. curl -sS...Aug 2, 2024 · 2 min readblog.openziti.io
Jitsi, meet zrokJitsi Meet is an open-source video conferencing server. I've wanted to run Jitsi behind zrok and someone asked about it today in the forum and we got it working! Here's how I conveniently self-host Jitsi with zrok. Why zrok? zrok.io makes it easy to ...Jul 31, 2024 · 4 min readblog.openziti.io
Extend Access to a Private S3 Bucket Using PythonA private S3 bucket protects against a data leak by denying all public access. This approach moves access control from the public S3 API to the network layer. We can use OpenZiti's cryptographic identity and attribute-based policies to securely exten...Jul 23, 2024 · 2 min readblog.openziti.io
Why We Verify GitHub CommitsAssigning the author on a commit is an essential feature of Git that allows you to send a commit on behalf of someone while preserving their authorship. I speculate this was the norm when the Linux Kernel authors, who also created Git, still received...PMay 24, 2024 · 3 min readblog.openziti.io
